CVE-2015-6749

Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
xiphvorbis-tools
𝑥
≤ 1.4.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vorbis-tools
bookworm
1.4.2-1
fixed
bullseye
1.4.0-11
fixed
sid
1.4.2-2
fixed
trixie
1.4.2-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vorbis-tools
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
precise
ignored
trusty
dne
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
vorbis-tools
suse enterprise desktop 15
1.4.0-1.53
fixed
suse enterprise desktop 15 SP1
1.4.0-1.53
fixed
suse enterprise desktop 15 SP2
1.4.0-1.53
fixed
suse enterprise desktop 15 SP3
1.4.0-1.53
fixed
suse enterprise desktop 15 SP4
1.4.0-1.53
fixed
suse enterprise desktop 15 SP5
1.4.0-1.53
fixed
suse enterprise desktop 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise desktop 15 SP7
1.4.0-150000.3.3.1
fixed
suse enterprise sap 12
1.4.0-26.1
fixed
suse enterprise sap 12 SP5
1.4.0-26.1
fixed
suse enterprise sap 15
1.4.0-1.53
fixed
suse enterprise sap 15 SP1
1.4.0-1.53
fixed
suse enterprise sap 15 SP2
1.4.0-1.53
fixed
suse enterprise sap 15 SP3
1.4.0-1.53
fixed
suse enterprise sap 15 SP4
1.4.0-1.53
fixed
suse enterprise sap 15 SP5
1.4.0-1.53
fixed
suse enterprise sap 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise sap 15 SP7
1.4.0-150000.3.3.1
fixed
suse enterprise server 12
1.4.0-26.1
fixed
suse enterprise server 12 SP1
1.4.0-26.1
fixed
suse enterprise server 12 SP2
1.4.0-26.1
fixed
suse enterprise server 12 SP3
1.4.0-26.1
fixed
suse enterprise server 12 SP4
1.4.0-26.1
fixed
suse enterprise server 12 SP5
1.4.0-26.1
fixed
suse enterprise server 15
1.4.0-1.53
fixed
suse enterprise server 15 SP1
1.4.0-1.53
fixed
suse enterprise server 15 SP2
1.4.0-1.53
fixed
suse enterprise server 15 SP3
1.4.0-1.53
fixed
suse enterprise server 15 SP4
1.4.0-1.53
fixed
suse enterprise server 15 SP5
1.4.0-1.53
fixed
suse enterprise server 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise server 15 SP7
1.4.0-150000.3.3.1
fixed
vorbis-tools-lang
suse enterprise desktop 15
1.4.0-1.53
fixed
suse enterprise desktop 15 SP1
1.4.0-1.53
fixed
suse enterprise desktop 15 SP2
1.4.0-1.53
fixed
suse enterprise desktop 15 SP3
1.4.0-1.53
fixed
suse enterprise desktop 15 SP4
1.4.0-1.53
fixed
suse enterprise desktop 15 SP5
1.4.0-1.53
fixed
suse enterprise desktop 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise desktop 15 SP7
1.4.0-150000.3.3.1
fixed
suse enterprise sap 12
1.4.0-26.1
fixed
suse enterprise sap 12 SP5
1.4.0-26.1
fixed
suse enterprise sap 15
1.4.0-1.53
fixed
suse enterprise sap 15 SP1
1.4.0-1.53
fixed
suse enterprise sap 15 SP2
1.4.0-1.53
fixed
suse enterprise sap 15 SP3
1.4.0-1.53
fixed
suse enterprise sap 15 SP4
1.4.0-1.53
fixed
suse enterprise sap 15 SP5
1.4.0-1.53
fixed
suse enterprise sap 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise sap 15 SP7
1.4.0-150000.3.3.1
fixed
suse enterprise server 12
1.4.0-26.1
fixed
suse enterprise server 12 SP1
1.4.0-26.1
fixed
suse enterprise server 12 SP2
1.4.0-26.1
fixed
suse enterprise server 12 SP3
1.4.0-26.1
fixed
suse enterprise server 12 SP4
1.4.0-26.1
fixed
suse enterprise server 12 SP5
1.4.0-26.1
fixed
suse enterprise server 15
1.4.0-1.53
fixed
suse enterprise server 15 SP1
1.4.0-1.53
fixed
suse enterprise server 15 SP2
1.4.0-1.53
fixed
suse enterprise server 15 SP3
1.4.0-1.53
fixed
suse enterprise server 15 SP4
1.4.0-1.53
fixed
suse enterprise server 15 SP5
1.4.0-1.53
fixed
suse enterprise server 15 SP6
1.4.0-150000.3.3.1
fixed
suse enterprise server 15 SP7
1.4.0-150000.3.3.1
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165555.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166424.html
http://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html
http://seclists.org/oss-sec/2015/q3/455
http://seclists.org/oss-sec/2015/q3/457
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797461
https://bugzilla.redhat.com/show_bug.cgi?id=1258424
https://bugzilla.redhat.com/show_bug.cgi?id=1258443
https://trac.xiph.org/attachment/ticket/2212/0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch
https://trac.xiph.org/ticket/2212
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165555.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166424.html
http://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html
http://seclists.org/oss-sec/2015/q3/455
http://seclists.org/oss-sec/2015/q3/457
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797461
https://bugzilla.redhat.com/show_bug.cgi?id=1258424
https://bugzilla.redhat.com/show_bug.cgi?id=1258443
https://trac.xiph.org/attachment/ticket/2212/0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch
https://trac.xiph.org/ticket/2212